When you uninstall and reinstall your Okta AD agent, you must decide whether you also want to remove the old Okta API token from your system. If you are performing an upgrade, you are not required to remove the old token. To remove the API token, you must delete the Okta AD agent folder and deactivate and remove your old agent.

Note: To avoid down time if you intend to continue using an AD agent, you must have at least two agents running before you uninstall one of them. For more information, see Update the Okta Active Directory (AD) agent.

To remove the configuration data, on the agent server, go to C:\Program Files (x86)\Okta and delete the Okta AD Agent folder. Deleting this folder removes the agent configuration data and the API Token from your hard drive. The API token for the server is still valid in Okta so it is important to remove the configuration data.

Revoke the API token by going to the agent monitor in Okta. Deactivate and remove the uninstalled agent, which will remove the API token.

Reinstall the Okta AD agent

Installing the AD agent does not overwrite the configuration data in the Okta AD Agent folder. If you want to reinstall and create a new API token, make sure you delete the Okta AD Agent folder (as described above) before you reinstall the AD agent. Then perform the following steps to reinstall your AD agent and deactivate and remove the old AD agent in Okta:

In the Settings tab, your agents are listed in the Agent Monitors section. Confirm that your reinstalled AD agent is connected to Okta and appears in the list. You should always make sure to have at least one AD agent online.

If you are performing an upgrade or reinstall and you do not want to revoke the Okta API token of the old AD agent, you are finished. Otherwise, proceed to the next step.

Under Agent Monitors, select the Deactivate link for the old AD agent and then click Ok to confirm. Deactivating the agent revokes its API token.

Click the Remove link for the old AD agent and then click Ok to confirm.